407 matches found
BELL-CVE-2022-42432 CVE-2022-42432 does not affect BellSoft software
Bulletin has no description...
CVE-2023-21817
Windows Kerberos Elevation of Privilege Vulnerability...
BELL-CVE-2021-20239 CVE-2021-20239 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-35496 CVE-2020-35496 does not affect BellSoft software
Bulletin has no description...
freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a...